EverySkill

A vetted skills registry for AI coding agents (claws). Browse at skills.every.to.

What is this?

EverySkill hosts curated skill files that extend AI agent capabilities. Skills define instructions, allowed tools, and behaviors that agents can fetch on-demand.

Submitting Skills

1. Go to skills.every.to/submit
2. Enter the submission password
3. Upload your SKILL.md file
4. A PR is automatically created

Security Checks

Every submission is reviewed by multiple frontier AI models before human approval:

Agent	Focus
Claude Opus 4.6	Prompt injection, instruction manipulation
GPT-5.2	Code execution, system access risks

Skills are checked for:

• Prompt injection (hidden instructions, "ignore previous", encoded commands)
• Dangerous tool usage (unrestricted Bash, rm -rf, sensitive file access)
• Data exfiltration (network calls to external URLs, reading credentials)
• Social engineering or manipulation attempts
• Overly permissive allowed-tools

A skill must pass both AI reviews, then receive human approval to be merged.

Architecture

skills.every.to
├── /                    → Browse all skills
├── /{skill-name}        → Skill detail page
├── /submit              → Upload form (password-protected)
├── /registry.json       → Machine-readable index for agents
└── /skills/{name}/      → Raw SKILL.md files

GitHub Actions
├── vet-skill.yml        → Multi-agent AI security review on PRs
└── test-vetting.yml     → Tests for the vetting system itself

Cloudflare Pages
└── Hosts the site, runs SSR for /submit and /api/*

Agents fetch skills via:

GET https://skills.every.to/registry.json    # Find skills
GET https://skills.every.to/skills/{name}/SKILL.md  # Fetch skill